The flaw lies in the exec function of the Rapids setproperty primitive handler in h2oAI's h2o-3 engine. It allows an attacker to manipulate property-setting behavior, bypassing the intended access controls. This can enable unauthorized modification of system properties or configuration, potentially leading to unauthorized actions or privilege escalation.

Vendor h2oAI and product h2o-3 are affected. Any instance of h2o-3 with a version equal to or less than 7402 is vulnerable. No additional versions are specified.

The CVSS score of 6.9 indicates moderate severity. No EPSS score is available and the issue is not listed in CISA KEV. The attack can be carried out remotely and public exploits exist. In environments exposed to untrusted networks the risk is higher, as an attacker could alter properties to gain elevated privileges or compromise system integrity.